# symbolic execution

Published articles for symbolic execution.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Keygenning with KLEE

DevFeed: [Keygenning with KLEE](<https://devfeed.tech/articles/keygenning-with-klee-39699.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2015/08/18/keygenning-with-klee/>)

Author: Michele "brt\_device" Bertasi

Published: 2015-08-19T05:12:00Z

Content type: tutorial

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [Software](<https://devfeed.tech/topics/software.md>), [Code](<https://devfeed.tech/topics/code.md>), [debug](<https://devfeed.tech/topics/debug.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [gcc](<https://devfeed.tech/topics/gcc.md>), [Scripting, bash](<https://devfeed.tech/topics/scripting-bash.md>), [WPF](<https://devfeed.tech/topics/wpf.md>)

Tags: [code](<https://devfeed.tech/tags/code.md>), [debugging](<https://devfeed.tech/tags/debugging.md>), [gcc](<https://devfeed.tech/tags/gcc.md>), [ida](<https://devfeed.tech/tags/ida.md>), [ida-pro](<https://devfeed.tech/tags/ida-pro.md>), [linux](<https://devfeed.tech/tags/linux.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [scripting](<https://devfeed.tech/tags/scripting.md>), [software](<https://devfeed.tech/tags/software.md>), [symbolic-execution](<https://devfeed.tech/tags/symbolic-execution.md>), [virtual-machine](<https://devfeed.tech/tags/virtual-machine.md>), [windbg](<https://devfeed.tech/tags/windbg.md>)

### AI overview

This article examines the reverse engineering of a software serial-number validation process and describes using the KLEE symbolic virtual machine to build a key generator. It also discusses tools and practices including IDA Pro, WinDbg, Linux, gcc, Bash scripting, and a WPF application.

### Source excerpt

Introduction In the past weeks I enjoyed working on reversing a piece of software (don't ask me the name), to study how serial numbers are validated. The story the user has to follow is pretty common: download the trial, pay, get the serial number, use it in the annoying nag ...

## Taming a wild nanomite-protected MIPS binary with symbolic execution: No Such Crackme

DevFeed: [Taming a wild nanomite-protected MIPS binary with symbolic execution: No Such Crackme](<https://devfeed.tech/articles/taming-a-wild-nanomite-protected-mips-binary-with-symbolic-execution-no-such-crackme-39697.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2014/10/11/taiming-a-wild-nanomite-protected-mips-binary-with-symbolic-execution-no-such-crackme/>)

Author: Axel "0vercl0k" Souchet & Emilien "tr4nce" Girault

Published: 2014-10-12T04:35:00Z

Content type: tutorial

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [Assembly](<https://devfeed.tech/topics/assembly.md>), [Security](<https://devfeed.tech/topics/security.md>), [debug](<https://devfeed.tech/topics/debug.md>), [Linux](<https://devfeed.tech/topics/linux.md>)

Tags: [assembly](<https://devfeed.tech/tags/assembly.md>), [debugging](<https://devfeed.tech/tags/debugging.md>), [intel](<https://devfeed.tech/tags/intel.md>), [linux](<https://devfeed.tech/tags/linux.md>), [mips](<https://devfeed.tech/tags/mips.md>), [nosuchcon](<https://devfeed.tech/tags/nosuchcon.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [security](<https://devfeed.tech/tags/security.md>), [symbolic-execution](<https://devfeed.tech/tags/symbolic-execution.md>), [z3](<https://devfeed.tech/tags/z3.md>), [z3py](<https://devfeed.tech/tags/z3py.md>)

### AI overview

A technical walkthrough of a No Such Con security challenge involving a nanomite-protected MIPS binary. The article introduces the challenge, MIPS fundamentals, debugging setup, and symbolic-execution-based analysis, with two co-authored solution paths.

### Source excerpt

As last year, the French conference No Such Con returns for its second edition in Paris from the 19th of November until the 21th of November. And again, the brilliant Eloi Vanderbeken & his mates at Synacktiv put together a series of three security challenges especially for this occasion. Apparently, the ...

## Breaking Kryptonite's obfuscation: a static analysis approach relying on symbolic execution

DevFeed: [Breaking Kryptonite's obfuscation: a static analysis approach relying on symbolic execution](<https://devfeed.tech/articles/breaking-kryptonite-s-obfuscation-a-static-analysis-approach-relying-on-symbolic-execution-39691.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2013/09/16/breaking-kryptonites-obfuscation-with-symbolic-execution/>)

Author: Axel "0vercl0k" Souchet

Published: 2013-09-16T18:47:00Z

Content type: tutorial

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [obfuscation](<https://devfeed.tech/topics/obfuscation.md>), [execution](<https://devfeed.tech/topics/execution.md>), [LLVM](<https://devfeed.tech/topics/llvm.md>), [clang](<https://devfeed.tech/topics/clang.md>), [Assembly](<https://devfeed.tech/topics/assembly.md>), [x86](<https://devfeed.tech/topics/x86.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [analysis](<https://devfeed.tech/tags/analysis.md>), [asm](<https://devfeed.tech/tags/asm.md>), [assembly](<https://devfeed.tech/tags/assembly.md>), [clang](<https://devfeed.tech/tags/clang.md>), [code](<https://devfeed.tech/tags/code.md>), [llvm](<https://devfeed.tech/tags/llvm.md>), [obfuscation](<https://devfeed.tech/tags/obfuscation.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [static](<https://devfeed.tech/tags/static.md>), [symbolic-execution](<https://devfeed.tech/tags/symbolic-execution.md>), [x86](<https://devfeed.tech/tags/x86.md>)

### AI overview

This tutorial demonstrates how symbolic execution can break Kryptonite, a proof-of-concept obfuscator that applies semantics-preserving transformations at the LLVM intermediate representation level. It describes a small symbolic execution engine built with IDAPy and Z3Py, using an x86 binary generated from LLVM code for a 32-bit adder.

### Source excerpt

Introduction Kryptonite was a proof-of-concept I built to obfuscate codes at the LLVM intermediate representation level. The idea was to use semantic-preserving transformations in order to not break the original program. One of the main idea was for example to build a home-made 32 bits adder to replace the add ...